FlowArk: Boosting Agentic Data-flow Analysis for Android Apps via Context-Aware Knowledge Reuse

arXiv:2607.11308 · cs.SE, cs.CR · Submitted 2026-07-13 · Read on arXiv

Yiming Zhang, Jiangrong Wu, Yuhong Nan

cs.SE, cs.CR

Submitted: 2026-07-13

Comments: 12 pages, 9 figures, 6 tables

License: http://arxiv.org/licenses/nonexclusive-distrib/1.0/

Terminology

• Distillation — 19× in this paper · explained in 2 episodes
• alpha — 15× in this paper · explained in 1 episode
• RAG — 9× in this paper · explained in 3 episodes
• Knowledge Distillation — 6× in this paper · explained in 11 episodes
• Agent Memory — 5× in this paper · explained in 1 episode
• Ablation — 4× in this paper · explained in 1 episode
• AI Agents — 1× in this paper · explained in 2 episodes
• Analyzer — 1× in this paper · explained in 1 episode
• Benchmarking — 1× in this paper · explained in 3 episodes
• Core — 1× in this paper · explained in 2 episodes
• F1 Score — 1× in this paper · explained in 3 episodes
• Foundation Model — 1× in this paper · explained in 3 episodes
• Foundation Models — 1× in this paper · explained in 7 episodes
• Hallucination — 1× in this paper · explained in 3 episodes
• Initial Data — 1× in this paper · explained in 2 episodes
• International Conference on Automated Software Engineering — 1× in this paper
• Robustness — 1× in this paper · explained in 5 episodes
• Trace — 1× in this paper · explained in 2 episodes
• Verification — 1× in this paper · explained in 2 episodes

Sources

• MemGovern: Enhancing Code Agents through Learning from Governed Human Experiences
• Qwen3 Embedding: Advancing Text Embedding and Reranking Through Foundation Models
• Everything You Wanted to Know About LLM-based Vulnerability Detection But Were Afraid to Ask
• The Hitchhiker's Guide to Program Analysis, Part II: Deep Thoughts by LLMs
• Multi-Agent Taint Specification Extraction for Vulnerability Detection
• LLM-based Vulnerability Detection at Project Scale: An Empirical Study
• QLCoder: A Query Synthesizer For Static Analysis of Security Vulnerabilities
• Your Code Agent Can Grow Alongside You with Structured Memory
• vEcho: A Paradigm Shift from Vulnerability Verification to Proactive Discovery with Large Language Models
• ReCode: Unify Plan and Action for Universal Granularity Control
• The Hidden Cost of Readability: How Code Formatting Silently Consumes Your LLM Budget

Related papers

• Falsification-Based Verification of LLM-Generated Optimization Models: Sound Test Batteries and Their Detection Limits
• GitSkills: A Dataset of Agent Skills on GitHub
• SABER: Benchmarking Operational Safety of LLM Coding Agents in Stateful Project Workspaces
• PackMonitor: Enabling Zero Package Hallucinations Through Decoding-Time Monitoring
• IntentCoding: Amplifying User Intent in Code Generation
• Incentives and Outcomes in Bug Bounties